Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa
File:                     f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa (raw, json)
Hash identifier:          47MooZC/qgnqtwojf9V1QdeOdWt1qSd0k6pnX3Ehafk=
Subject key identifier:   2C:D8:57:7B:A2:5A:74:9A:3C:C2:F2:FF:7B:F4:9A:AD:89:1C:C4:B5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8B2F60CD590E22F67B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     393886
IP address blocks:        142.111.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8b:2f:60:cd:59:0e:22:f6:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=4922217a-ba5f-4025-8b3e-3734200d1a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:44:17:cf:6c:6d:c1:37:f9:25:d2:88:2a:
                    32:bf:5d:d2:54:05:0a:d4:b9:e2:f6:4a:0b:89:01:
                    45:07:eb:e2:f5:5b:32:dd:31:24:37:f3:c0:df:42:
                    f7:b5:19:d8:d8:af:9c:24:c2:97:64:8a:b4:61:f8:
                    89:74:1c:2e:8e:13:3b:6f:5f:d3:db:15:de:0b:18:
                    84:46:9c:32:8e:d6:bb:0f:fe:c9:2b:63:27:f2:12:
                    87:18:5f:7d:91:4b:1f:08:f7:26:08:b7:f5:0c:73:
                    e8:19:47:b5:6f:40:db:03:31:09:f3:51:72:dd:4a:
                    1b:ac:8a:a3:7a:1b:59:43:41:2f:de:3d:98:35:e5:
                    c2:79:ef:59:72:74:f7:f8:ef:61:0f:9c:e8:9c:c5:
                    03:56:58:fc:d0:9a:42:82:66:cf:e1:29:e9:a6:21:
                    72:96:93:6d:de:ca:8e:63:ce:45:89:8f:e0:6e:80:
                    d1:3b:a9:dc:25:db:5b:ab:64:07:27:7a:82:04:30:
                    f0:c7:e0:38:dc:34:3d:08:6d:17:a9:c0:be:ad:06:
                    53:91:e7:78:76:dc:70:83:68:61:ef:d1:f6:da:83:
                    41:c6:4c:fb:e6:22:5c:a0:a2:c5:b8:19:37:99:2f:
                    5e:21:bc:35:4c:36:76:d9:12:0b:7e:c4:53:c8:d9:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:57:7B:A2:5A:74:9A:3C:C2:F2:FF:7B:F4:9A:AD:89:1C:C4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:ee:d5:50:4a:db:41:a9:aa:32:6f:b4:a2:e3:42:e3:89:
         65:8e:1f:9b:29:f6:dd:88:d9:d4:6b:8a:8d:ad:61:b6:6c:b4:
         05:a3:85:f7:0c:f7:50:5b:e3:a0:27:b2:49:13:3c:77:c1:90:
         0f:d1:93:20:13:b1:1f:63:82:a7:83:28:3a:ba:cf:32:95:c7:
         09:93:b5:64:e2:2f:19:65:8e:cd:b9:aa:31:a8:dc:39:ab:ef:
         ac:f5:16:f4:ec:76:aa:45:22:d5:e6:8e:cc:b1:5e:30:a4:89:
         72:77:5b:bb:c2:d3:b2:fc:1c:52:b7:73:1f:08:18:00:aa:c3:
         26:41:c3:b3:89:38:f7:ba:54:5c:5f:58:69:f5:a6:71:15:3a:
         e3:c5:36:e7:5c:a2:09:e4:f1:b5:05:1a:70:e0:94:e3:f2:5a:
         f6:2e:5a:6a:6c:5a:15:80:3c:79:fc:78:2a:43:0d:31:c3:18:
         5c:83:03:f7:3d:cc:e8:5e:21:ba:f4:70:e1:33:dd:67:67:9d:
         82:62:a2:a6:03:5d:e2:d0:99:ad:3c:93:c8:53:06:17:36:a8:
         b4:75:fa:3e:90:ae:f4:e8:5a:db:d8:59:0e:2f:ac:63:d8:58:
         ee:b5:b2:b3:52:87:da:a5:1f:3c:d1:dd:44:0f:36:e4:d7:0d:
         2a:e8:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:01 2025 by rpki-client